TRUSTCO BANK CORP N Y

Disclosure Controls and Procedures

The Company maintains disclosure controls and procedures (as that term is defined in Rules 13a-15(e) and 15d-15(e) of the Exchange Act) designed to ensure that information required to be disclosed in the reports that the Company files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the rules and forms of the SEC. An evaluation was carried out under the supervision and with the participation of the Company’s management, including the Chief Executive Officer and Chief Financial Officer, of the effectiveness of the Company’s disclosure controls and procedures as of the end of the period covered by this report. Based upon this evaluation of those disclosure controls and procedures, the Chief Executive Officer and Chief Financial Officer of the Company concluded, as of the end of the period covered by this report, that the Company’s disclosure controls and procedures were effective to ensure that information required to be disclosed in the reports the Company files and submits under the Exchange Act is recorded, processed, summarized and reported as and when required.

Index

In designing and evaluating the Company’s disclosure controls and procedures, management recognized that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives, and management necessarily was required to apply its judgment in evaluating the cost-benefit relationship of possible controls and procedures. Further, no evaluation of a cost-effective system of controls can provide absolute assurance that all control issues and instances of fraud, if any, will be detected.

Changes in Internal Control over Financial Reporting

There have been no changes in internal control over financial reporting (as defined in Rule 13a-15(f) and 15d-15(f) of the Exchange Act) during the quarter to which this report relates that have materially affected or are reasonably likely to materially affect, the Company’s internal control over financial reporting.